$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json) Hash identifier: AaHhc9v3HDF/J+PfbYK7gfVRBMYrksO3q89IyqJhKMo= Subject key identifier: 11:35:5F:97:3C:BD:95:31:19:48:94:22:13:5A:91:64:18:3C:A2:B4 Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft Manifest number: 0231 Signing time: Fri 05 Sep 2025 02:17:55 +0000 Manifest this update: Fri 05 Sep 2025 02:17:55 +0000 Manifest next update: Fri 12 Sep 2025 02:17:55 +0000 Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: pZicHa42btB4BX+yDNs0TdnDALDDbJRNN42Q22jOv3U=) 2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mhhqfIxRoBjhuINkZ3XIMhFtJRPA+gdmIPhSIee7DFc=) 3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: gcq2OURWYuZ9mt7r/ew2O7bw4Is8Oj5yrAJBkVF7NPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Sep 5 02:17:55 2025 GMT Not After : Sep 12 02:17:55 2025 GMT Subject: CN=68ba4853-265d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:99:c5:fa:fc:03:b5:b1:25:8a:ae:bc:df:d9: 48:5b:61:8e:f5:7e:66:aa:14:3f:eb:97:67:2a:18: 46:22:54:6e:0f:ee:56:19:3b:4b:ac:3f:8e:87:ae: 1f:12:f5:14:fc:a5:0c:a5:a8:13:9b:77:7b:96:3e: 8f:9f:0f:d1:ba:c1:8c:0e:b4:67:97:c5:6c:91:a6: 0c:21:7b:76:41:1c:25:e8:2e:34:60:00:53:aa:66: a5:32:6f:4c:40:1e:e1:43:7a:b9:66:7e:ce:ee:2d: 6b:36:a9:3d:bd:85:8d:83:b5:0e:44:ea:5d:63:e6: 8c:ff:f5:9c:d7:ae:d0:70:f6:ca:25:b0:e5:ef:d8: af:e1:0c:1c:58:4a:9b:d5:89:85:d2:94:6a:7d:35: e5:cd:f5:6f:77:93:1c:be:70:cf:c8:4a:a7:74:23: 3c:c7:d9:d5:4a:38:91:64:b9:58:5c:8d:81:58:bc: 08:26:f0:ef:14:ae:96:a5:86:e1:e2:00:0f:fe:b7: 1a:d6:c5:45:9d:e4:3d:c2:6b:42:80:17:46:d2:77: 7e:85:90:9d:7c:cf:99:90:9c:89:db:b5:cc:4f:1a: 25:30:ec:03:c1:ac:c5:5f:7d:27:8c:6b:2d:29:f5: 02:84:18:06:bf:14:8f:c9:c9:2f:9d:fc:05:15:b8: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:35:5F:97:3C:BD:95:31:19:48:94:22:13:5A:91:64:18:3C:A2:B4 X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:80:bd:b2:a0:ce:24:68:92:dc:38:88:d9:77:e2:06:5b:c5: 28:18:b4:96:dc:3f:e3:44:c6:c8:f5:39:f2:ac:e0:90:8c:27: 49:19:3e:dc:e7:23:6e:2d:cf:a0:cd:93:70:ab:28:bf:8f:a5: a3:53:bd:04:4a:6a:8f:6f:b0:5c:0e:a8:d5:91:64:1a:5f:ad: fd:fa:0c:38:25:62:0b:96:56:72:b4:86:57:1b:12:cb:6c:ba: 40:d1:6c:c6:90:ff:ef:d6:52:42:44:42:b6:57:52:21:4b:f5: b3:ba:ee:1b:23:a4:64:bb:b3:ab:cc:65:11:54:5d:ae:4b:de: 6f:1d:9e:33:a3:2f:7f:1f:c2:20:75:b8:e1:ad:fd:2e:fc:aa: 29:5f:93:d1:c9:19:99:3c:8a:9f:ea:05:58:16:18:81:64:89: e5:8a:a6:a3:4f:3c:1b:2c:79:74:33:b4:d1:b7:41:88:65:29: 38:3f:18:a6:4e:8b:81:3c:ba:67:ef:38:26:3d:e3:52:ee:90: 18:0d:ae:9c:52:58:f5:02:bf:96:66:a3:ff:bb:dd:12:80:fe: 54:da:bc:06:e3:36:c6:5c:97:1d:86:5b:b4:9c:89:5d:a2:65: df:9a:4c:6b:02:f4:3e:51:91:0b:ff:d7:ca:a5:e2:b3:08:9a: 4f:3b:34:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjUwOTA1MDIxNzU1WhcNMjUwOTEyMDIxNzU1WjAYMRYwFAYD VQQDEw02OGJhNDg1My0yNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZnF+vwDtbEliq6839lIW2GO9X5mqhQ/65dnKhhGIlRuD+5WGTtLrD+Oh64f EvUU/KUMpagTm3d7lj6Pnw/RusGMDrRnl8VskaYMIXt2QRwl6C40YABTqmalMm9M QB7hQ3q5Zn7O7i1rNqk9vYWNg7UOROpdY+aM//Wc167QcPbKJbDl79iv4QwcWEqb 1YmF0pRqfTXlzfVvd5McvnDPyEqndCM8x9nVSjiRZLlYXI2BWLwIJvDvFK6WpYbh 4gAP/rca1sVFneQ9wmtCgBdG0nd+hZCdfM+ZkJyJ27XMTxolMOwDwazFX30njGst KfUChBgGvxSPyckvnfwFFbiD1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE1X5c8 vZUxGUiUIhNakWQYPKK0MB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp N1I2TWFEY0VkcFJXbnU0ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAygL2yoM4kaJLcOIjZd+IGW8UoGLSW3D/jRMbI9TnyrOCQjCdJGT7c 5yNuLc+gzZNwqyi/j6WjU70ESmqPb7BcDqjVkWQaX639+gw4JWILllZytIZXGxLL bLpA0WzGkP/v1lJCREK2V1IhS/Wzuu4bI6Rku7OrzGURVF2uS95vHZ4zoy9/H8Ig dbjhrf0u/KopX5PRyRmZPIqf6gVYFhiBZInliqajTzwbLHl0M7TRt0GIZSk4Pxim TouBPLpn7zgmPeNS7pAYDa6cUlj1Ar+WZqP/u90SgP5U2rwG4zbGXJcdhlu0nIld omXfmkxrAvQ+UZEL/9fKpeKzCJpPOzSy -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:16 2025 by rpki-client